auth

Documentation

Index

• func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)
• func GetClaimSet(ctx context.Context) *jws.ClaimSet
• func GetKubeClient(ctx context.Context) kubernetes.Interface
• func GetWfClient(ctx context.Context) versioned.Interface
• type ContextKey
• type Gatekeeper
  • func NewGatekeeper(modes Modes, wfClient versioned.Interface, kubeClient kubernetes.Interface, ...) (Gatekeeper, error)
• type Mode
  • func GetMode(authorisation string) (Mode, error)
• type Modes
  • func (m Modes) Add(value string) error

Functions

func CanI

func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)

func GetClaimSet

func GetClaimSet(ctx context.Context) *jws.ClaimSet

func GetKubeClient

func GetKubeClient(ctx context.Context) kubernetes.Interface

func GetWfClient

func GetWfClient(ctx context.Context) versioned.Interface

Types

type ContextKey

type ContextKey string

const (
	WfKey       ContextKey = "versioned.Interface"
	KubeKey     ContextKey = "kubernetes.Interface"
	ClaimSetKey ContextKey = "jws.ClaimSet"
)

type Gatekeeper

type Gatekeeper interface {
	Context(ctx context.Context) (context.Context, error)
	UnaryServerInterceptor() grpc.UnaryServerInterceptor
	StreamServerInterceptor() grpc.StreamServerInterceptor
}

func NewGatekeeper

func NewGatekeeper(modes Modes, wfClient versioned.Interface, kubeClient kubernetes.Interface, restConfig *rest.Config, ssoIf sso.Interface) (Gatekeeper, error)

type Mode

type Mode string

const (
	Client Mode = "client"
	Server Mode = "server"
	SSO    Mode = "sso"
)

func GetMode

func GetMode(authorisation string) (Mode, error)

type Modes

type Modes map[Mode]bool

func (Modes) Add

func (m Modes) Add(value string) error